Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mjekeGHG3vMr7c1JiANBZYXsSkY.roa
File: mjekeGHG3vMr7c1JiANBZYXsSkY.roa (raw, json)
Hash identifier: Qt40Mv+v05s6tEFapI2ucqwkQz0ZIDIJBDdIfvSpqek=
Subject key identifier: 9A:37:A4:78:61:C6:DE:F3:2B:ED:CD:49:88:03:41:65:85:EC:4A:46
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0142
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mjekeGHG3vMr7c1JiANBZYXsSkY.roa
Signing time: Fri 15 Mar 2024 23:55:03 +0000
ROA not before: Fri 15 Mar 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Mar 15 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9A37A47861C6DEF32BEDCD498803416585EC4A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:11:df:3f:31:4c:51:c3:da:40:41:3a:9e:
43:0a:ad:85:be:5c:e0:14:12:3c:5e:2e:39:91:a9:
10:24:ce:1d:c7:30:dc:6b:42:8b:2c:92:6b:1b:55:
e3:fb:24:09:02:06:10:21:e2:63:86:a5:f5:16:fd:
6c:7f:4d:6c:32:e7:7f:e1:75:93:bf:eb:a3:d3:74:
99:f7:ce:c2:12:53:11:a4:fc:7d:4d:2e:9a:bf:0d:
2f:1c:95:ae:38:1f:71:00:a7:2e:42:2b:3c:04:e4:
00:1a:1b:de:06:8b:1c:9c:4b:61:9f:f5:39:c9:e3:
ab:b1:0a:5f:cb:5a:fc:97:17:0d:fe:ad:e8:f8:5c:
54:93:eb:fc:f6:82:1f:64:86:94:ae:b6:e0:71:fb:
4d:29:a3:05:78:9e:cd:77:6f:01:d9:1f:d2:f1:56:
a5:42:3a:6f:09:d1:8b:b4:1d:b4:20:fa:b9:22:89:
c0:71:f1:c2:f8:45:9a:8c:53:38:cf:2f:50:5e:ff:
24:e6:1b:56:42:b4:31:3a:1f:b6:cc:a7:84:bf:d2:
84:13:93:da:de:b3:3f:bf:5f:c4:76:c9:64:f8:97:
db:0c:1b:ed:8b:13:aa:72:38:03:a5:93:f5:e8:bb:
cf:b2:82:9e:aa:fa:02:00:a6:ed:6a:d4:c6:38:d5:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:A4:78:61:C6:DE:F3:2B:ED:CD:49:88:03:41:65:85:EC:4A:46
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mjekeGHG3vMr7c1JiANBZYXsSkY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:68:d1:c3:59:c5:45:ae:c0:c5:43:92:fd:7c:02:9d:c2:dd:
a2:be:3e:e2:47:8e:e7:81:83:67:db:08:a6:fc:25:3f:97:c7:
4d:ca:eb:01:54:df:3e:1e:f8:79:61:35:61:24:08:ef:e6:e3:
fc:97:2c:02:f2:bf:32:cd:37:78:cd:4b:1f:22:44:ba:50:69:
49:60:f3:4d:9a:2c:21:bf:4e:51:20:13:a0:0c:1c:5e:62:ba:
54:1c:3f:e1:51:28:54:0b:56:be:f1:9f:c7:fc:a7:81:f1:5d:
16:c9:32:e6:40:a4:f9:a0:91:9c:f1:73:30:d0:8d:a6:ce:f0:
d8:4a:27:7b:8a:80:cc:6e:99:02:0a:86:b8:be:d0:f8:c5:96:
20:96:61:81:4c:ee:a3:c9:9e:ff:90:bd:48:d4:d7:96:dc:12:
48:b6:45:7c:1b:58:fb:0b:c7:be:c4:0a:2d:81:4d:25:75:51:
eb:b9:ef:a9:98:34:dd:b1:13:11:3e:92:1c:e0:b8:f3:10:16:
51:0a:49:ec:54:1e:5e:a7:85:36:ef:29:62:41:02:87:e3:b1:
88:21:0e:5a:45:a0:17:45:73:3c:10:cf:a7:bd:3f:d6:38:98:
1e:e3:cd:dd:8e:18:77:4d:2c:a4:32:55:a3:db:fc:ab:39:b0:
3a:50:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 06:43:34 2024 by rpki-client on console-ams.rpki-client.org